CVE-2026-87734

Deferred Deferred - Pending Action

Out-of-Order Segment Reassembly DoS in OCaml utcp

Publication date: 2026-09-09

Last updated on: 2026-09-14

Assigner: MITRE

Description

An issue was discovered in the utcp package before 0.0.6 for OCaml. Out-of-order segment reassembly allows remote denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-09

Last Modified

2026-09-14

Generated

2026-09-29

AI Q&A

2026-09-09

EPSS Evaluated

2026-09-27

NVD

CVE-2026-87734

EUVD

EUVD-2026-74620

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-923	The product establishes a communication channel to (or from) an endpoint for privileged or protected operations, but it does not properly ensure that it is communicating with the correct endpoint.

Attack-Flow Graph

Executive Summary

This vulnerability involves a flaw in the utcp package for OCaml before version 0.0.6. It allows remote attackers to cause a denial of service by exploiting out-of-order segment reassembly.

Impact Analysis

The vulnerability can lead to system crashes or unresponsiveness due to a denial of service attack. It may disrupt services relying on the utcp package for OCaml.

Compliance Impact

The vulnerability causes a denial of service via out-of-order segment reassembly, which could disrupt services handling sensitive data. This may impact compliance by reducing availability of systems processing personal or health data, potentially violating GDPR's availability principle or HIPAA's access requirements.

Mitigation Strategies

Update the utcp package to version 0.0.6 or later to address the out-of-order segment reassembly issue.

Hi! I’m here to help you understand CVE-2026-87734. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70